[LoganDark]

If it's only for certain ports, they can just use non-standard ports.

[magicalhippo]

Not uncommon to have a drop all rule as default on outgoing packets as well.

Regular http gets redirected to proxy, non-standard traffic needs to be explicitly allowed out.